Homepage changs

  The Rhino 06:56 18 Jun 2006

My homepage keeps changing to click here which is trying to look like a Nicrosoft soutios page......
I keep reseting the home page and have cleared all cookies and |Temp files

Thamk you in advance


  Taff™ 07:43 18 Jun 2006

Assuming you`re on XP download Windows Defender click here and run it. Note that you will need to do a Full Scan which you`ll find by clicking the drop down arrow next to the Scan button.

If after a reboot the problem persists then the malware has put itself in the System Restore files and reloads on a reboot. Turn off system restore, repeat the scan, reboot and turn System Restore back on.

If it persists after that we`ll give you links to some other recommended software.

  Fruit Bat /\0/\ 11:38 18 Jun 2006

You have a pest belongs to the Smitfraud family of hijackers. You must have one of the variants that is not fully detected yet by Adaware. Please follow these steps and post back here with the requested logs.

1. Print out or save to notepad these instructions as you will need to do most steps offline and in SAFE MODE (so you won't have this window open to see the instruction from)

2. Download SmitfraudFix (by S!Ri) to your Desktop (Win2k/WinXP only!).
click here
Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop.

How to extract (decompress) zipped or compressed files
click here

Note : process.exe is part of the SmitFraudFix tool and is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky, Panda) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
click here

3 Download, install, and update Ewido AntiMalware (get the free trial version)
click here

a. Install Ewido AntiMalware

b. Launch Ewido, there should be a big yellow E icon on your desktop, double-click it.

c. The program will prompt you to update click the OK button

d. The program will now go to the main screen

e. On the left hand side of the main screen click on Update

f. Click on Start. The update will start and a progress bar will show the updates being installed.

g. Do not scan yet. Do that later in SAFE MODE. After updating close Ewido and any open programs.

4. Reboot into Safe Mode
How to start the computer in Safe mode
click here

5. Open the SmitfraudFix folder and double-click smitfraudfix.cmd

Select option #2 - Clean by typing 2 and press Enter.
Wait for the tool to complete and disk cleanup to finish.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?" answer Yes by typing Y and hit Enter.
The tool will also check if wininet.dll is infected. If a clean version is found, you will be prompted to replace wininet.dll. Answer Yes to the question "Replace infected file ?" by typing Y and hit Enter.

A reboot may be needed to finish the cleaning process, if you computer does not restart automatically please do it yourself manually.
6. Start Ewido AntiMalware

a. Click on scanner

b. Click on *complete system scan*

c. Let the program scan the machine.

d. While the scan is in progress you will be prompted to clean the first infected file it finds. Choose Remove, then put a check next to Perform action on all infections in the left corner of the box so you don't have to sit and watch Ewido the whole time.
Checkmark the box: *Create encrypted backup in the quarantine* (recommended)

Click OK.

When the scan finishes, click on "Save Report". This will create a text file. Make sure you know where to find this file again.

7. Reset Homepage if further problems persist you may need to scan with Hijackthis.

This thread is now locked and can not be replied to.

Elsewhere on IDG sites

Samsung Galaxy S9 review

Wacom Cintiq Pro 24 and 32 review – hands-on

When is the next Apple event?

Gmail : comment annuler l’envoi d’un e-mail ?